An approach to verify SysML functional requirements using Promela/SPIN | IEEE Conference Publication | IEEE Xplore